siderolabs / talos

Talos Linux is a modern Linux distribution built for Kubernetes.

Home Page:https://www.talos.dev

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Mount debugfs filesystem

alexandrem opened this issue · comments

Feature Request

Mount debugfs at the standard /sys/kernel/debug mount point automatically.

Description

Similar to siderolabs/pkgs#963 and the associated change smira@10e555a that got introduced in v1.7.3, I think it would be useful to have debugfs automatically mounted.

We have some older application that depends on that for the tracing (it may be updated to tracefs soon, but no ETA).

This currently requires adding some privileged daemonset or initContainer to do the mounting automatically as a workaround.

I don't think there's any downside to enable this by default in Talos Linux.

debugfs is not considered to be secure nowadays according to the best practices, and there are better solutions, so it won't be enabled in Talos Linux.